CVE

Id
18156  
CVE No.
CVE-2006-2052  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. NOTE: the original report may be inaccurate, since the "viewpro" string does not appear in the source code for version 1.0.2 of the product.  
Phase
Assigned (20060426)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
156341 18156 CVE-2006-2052 BUGTRAQ:20060425 Instant Photo Gallery <= Multiple XSS  View
156342 18156 CVE-2006-2052 URL:http://www.securityfocus.com/archive/1/archive/1/432022/100/0/threaded  View
156343 18156 CVE-2006-2052 BUGTRAQ:20060427 Re: Instant Photo Gallery <= Multiple XSS  View
156344 18156 CVE-2006-2052 URL:http://www.securityfocus.com/archive/1/archive/1/432241/100/0/threaded  View
156345 18156 CVE-2006-2052 BID:17696  View
156346 18156 CVE-2006-2052 URL:http://www.securityfocus.com/bid/17696  View
156347 18156 CVE-2006-2052 OSVDB:24984  View
156348 18156 CVE-2006-2052 URL:http://www.osvdb.org/24984  View
156349 18156 CVE-2006-2052 SREASON:790  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61506 JVNDB-2006-003772 3Com Baseline Switch 2848-SFP Plus のファームウェアにおけるサービス運用妨害 (DoS) の脆弱性 3Com Baseline Switch 2848-SFP Plus のファームウェアには、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2006-2054 18156 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003772.html  View